Re: DSA-1615-1 vs. tracker
On Mon, Jul 28, 2008 at 07:45:42PM +0200, Francesco Poli wrote:
> On Sat, 26 Jul 2008 20:25:16 +0200 Francesco Poli wrote:
>
> [...]
> > > On Friday 25 July 2008 01:07, Francesco Poli wrote:
> > > > > > I think I've noticed another DSA with tracker inconsistencies.
> > > > > > DSA-1615-1 [1] claims that several CVEs are fixed in
> > > > > > xulrunner/1.9.0.1-1 for sid. On the other hand, most of these CVEs
> > > > > > (which are linked from the DSA tracker page [2]) are not reported as
> > > > > > fixed in
> > > > > > xulrunner/1.9.0.1-1 by the tracker.
> [...]
> > I am *not* talking about etch, I am talking about *sid*!
> >
> > The DSA claims that the CVEs are fixed in unstable, while the tracker
> > says that unstable is still vulnerable (as far as most of the mentioned
> > CVEs are concerned).
> > This seems to be an inconsistency: either the DSA is wrong or the
> > tracker needs to be updated...
>
> Can someone please fix this?
It will be fixed in a few days.
Cheers,
Moritz
Reply to: